Reputation
19,465
Top tag
Next privilege 20,000 Rep.
Access 'trusted user' tools
Badges
1 30 79
Newest
 encryption
Impact
~498k people reached

Feb
11
awarded  Nice Question
Feb
9
comment Is there any advantage on encrypting the CMAC together with the message?
If you have any influence on this scheme, I would strongly suggest replacing it with AES-SIV, which is based on the same primitives (AES, CTR mode and CMAC), but is stronger (128-bit tag), less vulnerable to misuse (can be used even without an nonce), may have less overhead (assuming your scheme transmits an IV/nonce for CTR mode) and has an actual security proof.
Feb
9
comment Noisiest RF band for random number generation
+1 Besides, using RF noise for random numbers is wide open to active attacks: an attacker can just transmit on the frequency your RNG is tuned to.
Feb
9
answered Misunderstanding Broadcast Encryption
Feb
8
reviewed Reviewed OpenSSL encrypted text length
Feb
8
revised OpenSSL encrypted text length
remove gratuitous backticks
Feb
8
comment RSA with composite numbers
Related: crypto.stackexchange.com/questions/5170/…
Feb
8
comment Simple multiplication as an encryption method
See the part below the horizontal line.
Feb
8
answered Simple multiplication as an encryption method
Feb
3
revised Existence of encryption schemes where $F_{k}^{-1} \big( F_{k}(A) + R \big) = A + O(R)$
please don't use display math in question titles
Feb
3
revised CPA security of a stateless and deterministic encryption system
grammar, title capitalization
Feb
3
comment CPA security of a stateless and deterministic encryption system
Essentially the same argument also works for symmetric ciphers, since the definition of IND-CPA security assumes that the attacker has access to an encryption oracle.
Feb
2
revised Decrypt a message which is encrypted using XOR?
this has nothing to do with block ciphers
Jan
14
comment Specification of the Megamos crypto algorithm
Just for posterity, let me note that the protocol description that you quote above, via the cybergibbons website, appears to be originally quoted (without attribution, alas) from my answer to this question. (The cybergibbons version also has what appears to be a minor editing mistake in the second-to-last step, where it reads ${\rm T \to C}: r,G$ instead of ${\rm T \to C}: G'$, but you seem to have fixed that.)
Jan
6
comment Encryption for a short packet size
@BaruchEven: Yes, counter mode is safe even with predictable IVs, as long as they're never repeated. Generally, only CBC mode (and certain variants of CFB) requires unpredictable IVs.
Jan
6
answered Encryption for a short packet size
Jan
6
awarded  Talkative
Jan
5
comment Why is the private key generated first in public key crypto?
@yyyyyyy: In fact, many RSA implementations do store $p$ and $q$ as part of the private key, since doing so allows using the Chinese remainder theorem to speed up the algorithm.
Jan
3
revised Why hash the message before signing it with RSA?
added 133 characters in body; edited title
Jan
3
reviewed Close RSA - Why should we sign hash rather than raw content?